Description
pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command. NOTE: some of these details are obtained from third party information.
References
- ariadne-pinp-command-execution(40989) vdb-entry
- 43055 vdb-entry
- 28093 vdb-entry
- http://www.ariadne-cms.org/download/changes/
- 29191 third-party-advisory